I think this might be a pretty severe prompt injection pattern

→ View original post on X — @simonw